HIGH🇵🇱 Wersja polska

CVE-2019-11514

CVSS 7.5v3.0pub. 2019-04-25upd. 2024-11-21

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Flarum

    APP
    Flarum
    0.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-41938CRITICAL9.0PL ✓same product

XSS w tytułach dyskusji platformy Flarum (v1.5.0–v1.6.1)

CVE-2021-32671CRITICAL10.0PL ✓same product

XSS w Flarum — wykonanie złośliwego HTML przez system tłumaczeń

CVE-2023-40033HIGH7.1same product

Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to cond...

CVE-2023-22487HIGH7.7same product

Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mention...

CVE-2019-13183HIGH8.8same product

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings.